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(54) DISTRIBUTED MULTI-LEVEL COMPUTER SECURITY SYSTEM AND METHOD 
FOR THIS SYSTEM 

(57)Abstract: 

PURPOSE: To provide a mechanism which secures 
communication in a reliable area of a system. 
CONSTITUTION: Reliable area definition tables 130 and 



182 define which reliable areas computers 150 and 170 
are members of, and these tables define the security level 
of stored data. For the purpose of transmitting a 
designated message to the other computer system 170, a 
reliable area service program 156 checks that both of 
systems are members of a common reliable area and 
transmits the message as a protocol data unit. The 
reception system 170 verifies components of this data 
unit to discriminate which security policy should be 
executed for this message. 
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(54) [flBJO*^] 9ii!T;^^.3>tfa-?ffi«SIi'^fitt^ 



(57) [gft] (££*) 
[165] i'*f-A«ftftftJ*rtT*T$aft*ft«t* 
ftjttftft-ft. 

mm no, 1 8 2 «ta > 

?150. 17 <oe«Mi«<o> >/<-**je* 

MR**- tf* • yn^5Al 5 6»i»ftLfcji»*- 
vift^n^lfi-^vXfAl 7 0^SSit5fc*t 

rnfa* • f-^ • hfcLT&fttie £ft'> 
XtA 1 7 0 li-f-Or'- * • as? FOftfl-tftJEU 
:<5>-h-;i:h ix f oftftftB4< y v- *£ff t 
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1 

7h7-?<0> 7-te-v2HIgEKi3V>T\ ±Eo> -y 
*ff tTf - 9 e>m& L I ±B2*>&8lt<D 3 > tf 

£^fcv>.fc-5i;L-C±B*M 7-fc-yicHtttMtl 
t4f-?i:J:o Tfl|j£ $ *l-&±EO&p< 7 -b- v ; ± 

BBS U ±E03>tT*-^ 
• S'X?-Ai±E0?JgB$:Kfc3Vl£*-* • ->XfA 
WffiWi < fc 1> 1 oo*«<7)««!g«J<iO^ >•/<— c 
*>*.Ifc*}&aEU ±BO^fc < fc 1 o^Sco^SI 
1 oo«))i||JS5:SlR1--5¥a ; ±Bon 
>tfA-*U*«-*IKHI^**BU ±ffi<7)>v-h- 
v\ ±E<^7-fc--x'fcMS1--&±E<0 5<-<Jk fc-fctf 

±e*> s«? Lfc«gwi* k*h- * am* * -> t 

SSSUTs ±EO v - ;i/ L ;( 7 -fc - v , 

S> fc M«t * ±EO 5 ^/K X ITJlB <os« L fcflMR 

Brt3*U ±E©«B«WW--£x¥*HU ±E«*» 
h 7 - ? £:frLT±EO 3 > fa - * OflOf&Oa > kf 
i-^'CJi'stHl^iiJ'/D h • f - ? • a. - 7 

3. ^ y H*J W±K O v - * $ ft ^ 7 -fc - V & %m. $ ix 
fc*>OfcLT£JtA*t*lftU, ±B<0£4tLfc:/n h = 
H, ■ f-? • a.r.7 h<0±E<3fi£#O&* 
8*;rt*±EO 3 > kf* - 9 \z «t o Tg£ $ ftfc* 7 
•t-->'S-^aE1-**g:* $ h\z%tZ> i fc fc&fifc t * 

[Sl*«2] ±BO«ilBi*-9— e^Wktt, ±E<0 

±KO 3 .fc OUiEO&JeS itfc 3 v fcf.3. - 

v *8fr1-*¥gK i o r $ h fcfcjft $ jt* £ fc 



(2) #B?!¥6-9 5 9 9 1 

2 

«r# « fc 1- 4 i B*w> * -/ -t - vmms.* 
mm. 3 ] ±eo«k«hw- vx^mt. ±teo 

^Sr±BOgtt«-»2l«i{:|E^1-&^S*^L, -f-O® 
EOS^t Lfc 7*n h 3 >v • ^ • j.- 7 h l*J<0±E<0 
Cfc*!»gifct*iS*SlE«tO> 7-b-->'^<g^S. 
70 i o o o 1 ] 

*ifc(CBaU $«9{:»L<(i, *tifii/^rAT*3> 

I0 0 0 2l 

7 h7-^T?$^tt*«J*1--6ifcli, ■£«I-MB-C 

20 iitlltt, iamicM*>-S3.-Hf-fcvXf A<7) 

S«1"4'>A^Afc3.— flfi$ft£1inR«>ttB 

^ifc7i { ^4ft*o #<om*ffl3>tfi-^ • i/x-r 
A-Cli, HBfiattavifa-^tflESB-fiou* 
ffl-f*jimiS!S"t-»x 3 > fa-? • /\— K>> x 7£T 
«-«St*^fcUJ;oTffiSE$ft-&. L*»L, ^Oft 
±ffl<7?»^ti, •a«K*fft«J3^ Vfa-* • ^- K7 
xTfcaMWl4B*«-Ctt»v». Lfc**cT, 

7 >7~7C0J--Hf- (H^tc»i> v/^-fcOfim*) 

KB«t»* **B*4i*-*tt»:««?TB*»llftt, 
RSA<02r**-i;j:^El, iSi^-rAfci/AD 
-7* (Ne e d h am&S chroeder) <0Hffi& 

I T07r-Mtlit:J:**-^DX (kerbero 

[0 0 0 3] Lrt'U ^<03>tri-?^ffli-5ia 

^fc-^ ^oife^izti, 3.-- r-nvmmwutx-a+ft 

£**KK*4jW fc*\ SWjft-Ca— r-ttif©«« 
{gg l/^^T»»»4>*» fc J: -J ^# < ortBim ^ 

t*^-e**. ciosuw««sr, ^—v—Ammtx 

^-5. T5R«J fcOf*. •WAlf, ¥£fflifcfifg±ffl3> 
50 t^d^imfStix, #<W>^tAT% 



3 

[0 0 0 4] a«UtnXLtv»43.-¥-l*» .1*16.3. 

LTv»4«**#fciEL < **>t tfllH* 

LTV>4.I4:<i, jl— y-tf)jaS4"9-#- hi"43>tf 

[0 0 0 5] ->Xfi*<0 rttKflMU (t r 

ust r e r Iras) ftr&ttaftfcfiWEI^tRtll 

•c* # 4 c t i £1* A7W$3£-e # 4 J: -7 u £ ii h <n j 

$ft4„ 
[0 0 0 6] 

4 sst * aft 1 4 n > tr a - * ftsiftK -> * ? a r* 

4 0 c*uMHfc*u» #S6W(i, f*>3 

[0 0 0 7] <I8iS®<£M >/<--C*445-3>^a-^ 
«1"4. Lfcrt'oT, y*-5>tt» 68^1-4 7^* 
1-4. 

[0 0 0 8] *3>tfA-*rtOfflMWW--l?* • 7" 

aMrf4fc*ta— 5?C9^**Wt, 
7? hftt4ft**1f^o CWMftS* 

on > - 9 \zr- 9 imte L J: 9 £i*AT C<03 > 

M3.-9 ■ >x7-A<om®m^&i%&LtotL% 



(3) ^¥6 -9 5 9 9 1 

4 

>\£*-9 • ->^-fAi:^SJtf-?-y 7 have* 
• y^fAOSW-/^ fc* 1 oo#il1-4djgt 

m®.<?) z\tztf&i y tzx-zoio* 

;*t<b«5il>£ < b (> 1 ^O^iit4«S«*SO^ >'< 
^v^>f>f*4o 

[0 0 0 9] 2^3>tri-^^iiOM«« 
#<9.* W<--C;fc4fclb, -g-O* -/-fc-vli, 7*nhn 
* • f-* • ju-y Yt LXm9Zil % ZfUZttt -y-t 
-i>4>v-;U K • /\*-y 3 > (sealed vers 

ion), &ftvXrA£i— ^-»:>t-r4*Sgtlfc 

i l tz&mmmztt-t 4sisij?* { # * *t4 . 

[0 0 10] SffiL^yn • 7-9 • h 
20 li, Z<o-/u F3;i, • f-^ • .x-y brt(Dv-;i-g*L 
fc> y-t-y**»t LT£tt3*4H&U, iO^lt^o 
fc7*n h a;v • f- ^ • as y h <0«^lf3?O#^ 
|Et4ii:t:J:oTftia$^4o S«btc, SflL^ya 

•J->--Sr*Wt4'<§*^*5e1-4/c*tc, S^n^e 
[0 0 11] 

fs,&\zat)®§,{zmm$ix&<, miz&mix, 

ffi#a€^i 1 0, itztmomammz i ^mmz 
&mziitz* 9 102-10 8<7>*-&i 0 00 

AM (context) ftxmftlTbo Ztlt><Dzi>\£ 
a--9 1 0 2-1 0 80#«{i, *v h7-^?tL3t3 

• vxf-Ai 0 oonsuoy- KUfiflM-4 
40 [0 0 1 2] 3>fcf*-? 1 0 2-1 0 8li&*(i, U 

•feA • ^t'JRAM • K • • (RO 

M) , ASEigSS (Hit*, SS&f-f fctiftf 
^f^^) , a— If- • ^?7i-X («iCf, 4r-sK 
— K» *-^i3J:iKy>j>^) iJitriiM^- 

50 [0013] *»WO»a«:-«Elt«"CWBt* 1 o<0 



5 

flpftli* r^#tt-9— I^^J (naming s 

e r v i c e) 11 2f*>lK Ztlli*v h7-*£# 
LX£X<r>*>\£*-9 1 0 2-1 0 8 K7*-t*1-£ 
;H'-e^= £©*#ltfl— 1 2tt, g#fi*){c 

7-? 1 1 2«5^TWi- r-|:ioTHSt**t* 
M^ix^.iaoT'-^^^-f^o *|&W<OjtMr-(i, 

* % cit©«ii|MiJBlT-CJ:OIWBI=llMt*. 
it-fr-fcTxi l 2^g^T**-J)i:v»te*tscili > •f-oi 

*i l 2^<bof-^<o$HAiix c:itrt>f>*fjtffi$W 

mmmat. 

-So «K»*l±:i • vxfiw^id, 

? • v^f Alt, yXfAWiSfl?JiS^yfe-/0 
[0 0 14] £*fi«l(C, «»(««ti, 3 >tf 

oawufEd j*-e«Ht4 :t#tH. -6(03 v kf 

nwiTOtt***^ -itmi ra«&*j > r« 

«U > r&flt£*J(0MIU , rWRMAj Sfoi-jiS; 
Srfttt bH1z7-9 D*K<n X 9 UfcMi*^ S 
[0 0 15] H2«-#raLT> £#tt*-£xi 1 214 



(4) #1^6-9 5 9 9 1 

5 

777h • 774>1-fcfc*>f'-*^-XfU 3 0 b L 

•cans ft* t t l-oefflMdftojt 

. v^TAi:jtfLTlo«ffl 3 2 £ 

SS:^T»;xht-5o vKO^l 3 ooa?ji&*ifetajii2 

10 0 1 6] El 1 K^t***?!** «*flW*tt«t+ 
-tfxi l 2A**»), Cfttrfi, fejSM&gl 3 Ori'-g- 
;o ifu> 0 dO^Sfetfdo^ij^ti. fiMWttotl^UfEVt- 

1 3 0 1 o£ 

kfXOKtt*'ttH/^f**o «8«#*1 3 0<7>$2 
flttfcffli* 4>4 < 1 1 1 ^<9«31«!&<Oj< C** 

ttrwrtot*, zc\x-mztizmm<7>imx'$>i> 0 

- Pfl-e*ffl * itr v» * am * eft? 4 *a<Dts^«go 
;557Vyx-> a >(±, ift^oa— y-<oMTf?*' 

otiiwy^fA **£i«r ens: s fc&ttttftn£K* # 

ft*fclifWt«t (signed) S*tfcf-^t?* 
40 *. r«Pf#ltJ (ti*>^ ■f-^flJ 

50 mmwm.^, Mmzj-tw i±, seL^-f-*'^ 



(5) 

7 

USH L tc&fe v * t A C £ o tifc 4 O * f 
imi->^Ti J&ffcjfcT? J: ? ic£T*& £ it 

rwwiKu^^j t rut 

•t o TiM*' |6] It it* v * r M- *> r -f >J - -> 

-r*j&»<M&'&-l::JK&'<£ 7 * •> s voM|iJA»#Bg LTv» 

$ iifc f - 9 i t <r> X 7 *) f8 •? frVfei i> o 

\t9-Y-v h • <s*7-i>>-t%*>-t>$:m*s*Tl*bty&1fr 
5eW$& 2 n > kf a - 5- -C^|gl+(O#^<0 a— r- o -y 
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[0 0 17] m3<r>7uy?®i3£V!\%4<oyzi- ■ ^ 
7*'J*— 5>3>1 5 2^7t-'/l 5 3£3£±U -I 

-■ r- (ifctt77';y->a > • •t'd^a) cise) 
tt^^^r-istt-^^i^tccro^ v-t-v'i 5 3 

5 4 KjB«**C« 2l<f/n-bxiira«&$h.i (IM 4 <o 
1 5 4(1, »4WK«KSft.4:v»a— • fxx^yu 

[0 0 18J 4 IVf-VtHLz'sVa.-f • vXf-A 1 5 

oatit*«l»t**:*«)fMffRBI««*»*:«tv»affe 
If, *v H7-^ • -f >^7x-Xl 5 4lip<-/-b-v 
1 5 3*a:«3Vei-^0|KS-iJ--tf^ • 
5 5US£»K Z.ff>fr-l->\±*'/ Y V ~ 9 ±.X-<r>mM<r) 

1 5 5li> '(>9-*y\> (Internet) <0TC 
PtfcliUDP, ISO Wtt-HWdlBa* - ^ i £li 
LOfES*- IfX (ISO's Connect 
ion Oriented or Connectio 
nless Transport Services) 

r 7 - 9 ±4r^g$ ft* f- ^ (cMSt Vn h a 

[0 0 19] *«Hotto*t>*tt*!lo*(;(i. 

tU ^iBLn^tri-^vXri 1 5 0* f i 
<om<or-9i^i,, mmZiXXy>>Z>ji-yt-5>tf?y 
X^»tS*L«rV»«%»f Uf77'2 0 2) , ^O^y-b 

7*2 0 4) . 3(s:|&W<0(£w3li£^-Cli, l>7X#ttL 

St±, 9 • !>7-?03>ei-j' 

• ->^f a(±, &m2iitzr-9tf£x%mx'*>z>t l 

[0 0 2 0] w<0> »-fe-^*«««B«>§««>fci{>U 



9 

$*VtV>&> y-b-i y 1 5 3 iWtzb^fr^-ftlfrX 
* r miS«^-tr^ • -fniTyA (TRSP) 1 5 6 U 

{ZTVf2 06^X^2 0 8) o £;h.(4, 

«siS<o»> axv (2) i^o-'aitv^rACBiat* jo 

W^-y? h • *X^A*4Mi«*Sl 3 OK'JXh* 
*L1>>i5rV»4t>l4\ wtU4v>-f*i«0fej8$Bi&O;- w-c- 

^xA^-fnt^iiW^^O^ >/\*-T-(4fci/>fc 

4tv--7-:v;U44 1 l8f$it, ;«)^ -7-b-:>*t4£(b*t&v> 
(Xr-x72 1 0) o 2O0v^rAU*tL 20 

flUiffTrSiffx LWotin^ vfc-yttS«Sii 

[0 0 2 1] TRSP 1 5 614, TOLv^t 

(7,r 7 72 12). 6L*ae«*M***l9fl>*:ft: 
U14, '(i«IIltOrt<7)lo«rS^L5rit*i.(^e>4^o 

& « %nm.* o it *> a* as * * i4f§spifi#og#- 

fr<r>^TtlfrX-$>Z> a T 

r s p 1 5 6 imiR$titz®nmi&<om5ftm i §mrfa 

^7il 5 8 £Hf Itt**-. 

[0 0 2 2] fiff««1tff1»Sffa-/n^?A 1 5 8 

14, i»jg«>*i[flw«>wwwi#y?'-**ff+*it 

tttttm7*nir?At*4. .r<D7n^7A|4, £ 40 

^ISSfSSW^^O?^^*^^, SttSftfc (t r 
u s t e d) tmSflkl 6 0i*tK$rfroT, g^rVC 

v>* > »/ -t- t ri#<o** n- * a- • r- rmmrn 

7 -t— /Of - ? MffiS U^^(?)7'<)V* t , CO 
[0 0 2 3] flffiS*tfctt»36*l 6 0t4, 3>tfi- 50 



#S¥6-9 5 9 9 1 

/0 

9 <r> n - * *tt$figB>P U fcftftt * = 
Vfcfa.-* • vXtAo8P7>-C*^. £tU4, v^rA 

-fit*— if-fc3>ifA-*±t?£fr$*t**yi£0 

oT, COgtfSiifcttS&lflil 6 014, a 
±X'%fiZtiZ>ti!.&tZ<r>i3 1 mr-i;c>Xftbfiifzim 

[0024] ®m®t$.m&& ! §m-?vy?A 1 

5 814, £tt£*tfctm£i4 (TCB) 1 6 0*Ofzm 

T, tWWfcSK <tilifB#«#i , MSt ! J17n^?Al 
5 814, Iftffli La 1 5 OKXoX&MStl 

SSffiS U**<0 v «fr&iS?2> tz*> CfflNWi: J: o T 
«ffl$n-cv^te«37*-vy (^77* 
2 1 4) o t LTCB 1 6 OriMyfc-v'l 5 3 5:^ 
■TSCi:«rfi=Dr-r^ie> (Xr77*2 1 6) , t:^tz, 
w<7>frBrtSlfLv»7*-vy h • 7^;K4TRSP 1 5 

■b-it&fgv-'r's zii+mzti. z\<r>* v*-V\t& 
«Stt^v» Uf77-2 1 0) o flMflliMMf«SVa 
7*0^5^15 81^ Jfeii'Sfn-*;i/TCB 1 6 0C 

[0025] tcbi 6 ofr% * vk-vimzitm* 

ftbiltztfofE,tZ>t, «e$*t^>7-b-->'(4 < Ufa' 
aiLvXxAti--if-icjkti-^f:E$^ittSiJ^ « 

^r-r^i^t;, «rLv^7*-v-y Hc^&Stu, (xf 
772 1 8) o -?"<0^(0^<0Xf -7 7(4, ffyXfA 
1 7 0 i)*§tfe Liz* y -b- v't^ffi-C§ * J: n |c, t« v 
•t-v'Sr*S1-*«lt-C , ^)* U-r-7 72 2 0) <, 
tc»L<J4, HfU f mL.v7,rAtJ.-9--^*gStt > 
flMSfflttHtig ? t tSSft S w ^ ;v- o 5 ^ ;v i f v x r a <o 
#;SOT-e^-iff!Mt$*t, *'-7t -/-fc-v^oL— if 
-0*ffiOTf^ttt$*t4o *Et^f^#»tl4, m 
®mi&>— M7, • 7n^9Al 5 6WtB*- tf* • 7 
D?7A1 6 2ZVfXZHZ£oXmft$tl. m&f- 
\£X • 70^5 A 1 6 2(4, Lfcr-^OS-Mt 



(7) 

11 

[0026] ®6\zmt*<n&%!k\:z&mzti2>* v 

-fc - v* 1 5 3 B iZjfrt & 7- 9 <n%mt, 0* U-'ffi 1 3 > 

mm*? hv-? 1 1 o±*^-y7 h • 3^^-^ 

- y^fA 1 7 OCaHSSit* (Xx7 7*2 2 2) . [1 

L-C*nf>ft, 7-n h 3^®j«HS^2 5 1 
L, ^a«:ii^ffl1>0^^2 5 2 , fcjSa#2 5 4 20 

1/^(07^2 5 4. iJi^fin^lfa.-^ • vX 
r A "Cf- * £ 51 >) t& n S HZ fu \ a n, i 

#£-t*<OK<JZ-gfcim<a£TOlf«2 5 6i>«£itlZ 

. -fuyyA l 6 2 itfimiXVttttZtlZfritzlW 
%ttliZiX&fr<V^TtifrX'$>Z>Zt£imtZ>o Oftf 
Si Lvxr A 2 6 2 t a— if- 2 6 6 UWi-^^SffiS 

2 6 2 4 2o<03^ea- 20 

officii, gtflFor v yi-> a > 2 5 7 k.bb££8* 

CfcKioT, ±JiI>% L^S%«j>> :<07V>x-> 

3 i'34 { ?S2L-r^e>^bL^ffi«Si/-x;K07'N*;i'2 
5 8<D&»<>3i&-i:K<fcoT, ©fitfl: (abb rev 
i a t e) ;< y-t-v' . r'-^fl&fifc 
(4, £fc-fr-ex • f-? • a-7 f> 2 6 0*;£U £ 
*UCI4.x— if-o |"v-A'SiU:> 7-b-vJ 2 68 

(•*-&*>*>, BrtftSttfctfs itntw^iWttzt-y 

*-->') tf-StilZx, 30 
[0 0 2 7] E5Sr#BHL-C, -&&Z1\tz* 7-b- 
Ws*tU 1 7 OfS^StU.::^ (Xr7 7*2 3 
0) , ^g?W;>yb->'153Bli, JTFOi^t; 
&SSrU>. ffi*S«#18#£&7'n h 3;KD|EH^t?S 
fgZtitzf y zfrtfZtiX^fo--* 7-t-v"t4, -eoj: 
^USSSSft (XT7V2 3 2), ex • 

7*D^7A1 7 4 KioT, *7h7-*-'fV* r 7i 
-XI 8 4«r^LrS#r7-'j7— va>l 8 6tCji[« 
fKHSft Uf77-2 3 4) , WTUKWI-^^SEXt 
7 7*S:||fi : L^v^ 40 
[0 0 2 8] £«Lfc>7-b-->'l 5 3 B#:75X#lt 
$ivtv>fcv>i:1E£t*U4\ ZOgftLtz* 7-t-v' 
t4, -grff ^ > k" - ^ <0|E&-if - ex • fl,-f->l 7 2 

t;<fcoTft-r-?-o3>eA-*<^jti«ig-»f-ex • t* 

n^9Al 7 4tca%iirWESiL*. «MWW— If 
x • 7*n^vA i 7 4ti, £teS/XrA<9*K-f-ex 

• yn^^A 1 7 8£II?O f ffit-fc^:4•^-C.r<7>£fflL 
fc;<7-t-v$:;tfci^Et•^> (Xr /y2 3 6) . 

[0 0 2 9] it, p< 7-b—>'cov»-f^oai5- Ot^ 
*>*>, Sit^n h ruv • r-f ■ jl-7 50 
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S-fr-ex • 7*n^7A 1 7 8U«toT&aEStV&v>& 
e>lf (Xf-77'2 3 8) , -lco> y-t-v&g&Jili* 
BrSft, £<§L-fcp<7-fc-->'<4Jg3|§S*l* (Xt77*2 
4 0) . tvt-vVft&imiLtzZtli, Sofct 
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[0 0 3 2] «^®«<?3Ti7^*'BS;*Lfcifg^t* 
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««$-t-ex • 7*0^5 A 1 7 4 U&tJigSft&o 

[0 0 3 3] fiSi:, 4 Lp« yt-^ciiibos^* 
^•C/^XLfc^'otf, gE»$^fc> 7-b-v 1 5 3 C 

(Cltv(4il|f,tlfcx^^ 7-t-v 1 5 3 tm-X'$>Z>) 
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